xperseguers / t3ext-ig_ldap_sso_auth

TYPO3 Extension ig_ldap_sso_auth. This extension provides LDAP and SSO support for TYPO3.

Home Page:https://extensions.typo3.org/extension/ig_ldap_sso_auth

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Backend LDAP users with admin-flag can't access admin-modules with user password

jkkauhan opened this issue · comments

We are authenticating backend users with ig_ldap_sso_auth and some users have their admin-flag set. When trying to access admin modules in the backend, TYPO3 v10 requests the user password again for extra security. LDAP authenticated users get message that their password is not correct, where local TYPO3 users get access to admin modules. Workaround is to use install tool password.

I can confirm that for 10LTS and additionally for 11LTS using the extension in v3.7.0 - be aware that this additional re-auth is only necessary in PRODUCTION context, in DEVELOPMENT context it is skipped and you don't need to re-auth

Confirmation for TYPO3 11.5.35 and ig_ldap_sso_auth 3.7.1.
in the log I can find:
Login-attempt from 10.100.123.123, username 'pi_phi', no suitable hash method found!